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2. This REPORT consists of a total of 5 sheets, including this cover sheet. 

13 This report is also accompanied by ANNEXES, i.e. sheets of the description, claims andybr drawings which have 
been amended and are the basis for this report and/br sheets containing rectifications made before this Authority 
(see Rule 70.16 and Section 607 of the Administrative Instructions under the PCT). 
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Certain documents cited 

Certain defects in the international application 

Certain observations on the international application 
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I. Basis of the report 

1. With regard to the elements of the international application (Replacement sheets which have been furnished to 
the receiving Office in response to an invitation under Article 14 are referred to in this report as "originally filed" 
and are not annexed to this report since they do not contain amendments (Rules 70. 16 and 70. 17)): 

Description, Pages 

1-9 as originally filed 

Claims, Numbers 

1-17 filed with telefax on 28.04.2004 

Drawings, Figures 

1/4-4/4 as originally filed 

2. With regard to the language, all the elements marked above were available or furnished to this Authority in the 
language in which the international application was filed, unless otherwise indicated under this item. 

These elements were available or furnished to this Authority in the following language: , which is: 

□ the language of a translation furnished for the purposes of the international search (under Rule 23.1 (b)). 

□ the language of publication of the international application (under Rule 48.3(b)). 

□ the language of a translation furnished for the purposes of international preliminary examination (under 
Rule 55.2 and/or 55.3). 

3. With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the 
international preliminary examination was carried out on the basis of the sequence listing: 

□ contained in the international application in written form. 

□ filed together with the international application in computer readable form. 

□ furnished subsequently to this Authority in written form. 

□ furnished subsequently to this Authority in computer readable form. 

□ The statement that the subsequently furnished written sequence listing does not go beyond the disclosure 
in the international application as filed has been furnished. 

□ The statement that the information recorded in computer readable form is identical to the written sequence 
listing has been furnished. 

4. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 
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5. 13 This report has been established as if (some of) the amendments had not been made, since they have 

been considered to go beyond the disclosure as filed (Rule 70.2(c)). 

(Any replacement sheet containing such amendments must be referred to under item 1 and annexed to this 
report.) 

see separate sheet 

6. Additional observations, if necessary: 

V- Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 

1. Statement 

Novelty (N) Yes: Claims 1-17 

No: Claims 

Inventive step (IS) Yes: Claims 

No: Claims 1-17 

Industrial applicability (IA) Yes: Claims 1-17 

No: Claims 

2. Citations and explanations 
see separate sheet 
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Re Item I 

Basis of the report 

The amendments filed by fax the 28th of April 2004 are not allowable under Article 
34(2)(b) PCT since the added feature "tamper-resistant internal memory" is not directly 
and unambigously disclosed in the original description. Furthermore, the applicant has 
not provided any basis in the application document as filed for the amendments. 
This report is therefore based on the originally filed set of claims. 

Re Item V 

Reasoned statement under Article 35(2) with regard to novelty, inventive step or 
industrial applicability; citations and explanations supporting such statement 

Reference is made to the following documents: 

D1 : EP-A-0 81 6 970 (SUN MICROSYSTEMS INC) 7 January 1 998 (1 998-01-07) 
D2: US-A-5 805 882 (LE HUNG Q ET AL) 8 September 1 998 (1 998-09-08) 

1 The document D1 discloses (the references in parentheses applying to this 
document): 

A boot method suitable for use in a mobile device having FLASH memory ("flash 
PROM", col.4 1.21) storing boot instructions ("micro-code instruction", col.4 I.26-27 and 
1.31-32) comprising the step of: 

reading (implicit when the decryptor applies the digital signature, col.4 145-48) 
contents of a security location ("signature", col.4 1.51-55) in the FLASH memory (fig.2, 
item 57); 

comparing security values (col.5 I.49-50). 

Claim 1 differs principally from D1 in that the serial port is selectively polled based on 
the result of a comparison of security values. 

In D1 , when the security values are not equal, this means that the boot instructions are 
not valid. 

Starting from D1 , the problem to be solved by the present invention may therefore be 
regarded as how to obtain valid boot instructions. 

In seeking to solve the problem of obtaining valid boot instruction, the skilled person 
would consult D2 because it addresses exactly this problem and comes from the same 
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technical field (D2: col.2 l.67-col.3 I.4; col.3 1.19-26). 

The skilled person would then implement the recovery solution of D1 (col.5 I.54-58) 
using the features of D2 of checking if a flash ROM programming sequence is present 
at the data port and updating the flash ROM (D2: col. 3 1.18-25). The skilled person 
would thereby selectively poll a data port for activity based on the result of the 
comparison and arrive at a method differing only in obvious choices from claim 1 . More 
specifically, the choice of using a serial port as data port instead of the parallel port 
used in D2 is a matter of normal design procedure. 

The remaining difference with the method of claim 1 is that the cryptographic feature 
(computing hash codes) has been omitted in claim 1. Apart from the obviously and 
consequently simpler design of the method of claim 1 , the only result of the omission of 
the cryptographic feature is that the effects related to cryptography are no longer 
present in the method according to claim 1 . The skilled person would therefore 
whenever necessary or more appropriate use the well-known basic check of comparing 
contents of security location with a predetermined security value (which could be the 
"public key") instead of using the comparison and authentication methods of D1 . Such 
a simplification does not involve an inventive step (Articles 52(1) and 56 EPC). 

Applying a similar reasoning for the corresponding apparatus, the skilled person would 
arrive at an apparatus falling within claim 9. 

The subject-matter of independent claims 1 and 9 can therefore not be considered as 
involving an inventive step (Article 33(3) PCT). 



2 Dependent claims 2-8 and 1 0-17 do not contain any features which, in 
combination with the features of any claim to which they refer, meet the requirements of 
the PCT in respect of novelty or inventive step (Article 33(3) PCT). 

Features of dependent claims 2-8 and 10-17 are several straightforward possibilities 
which comes within the scope of the customary practice followed by the skilled person. 
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What is claimed is: 

1. A boot method for use in a mobile device having FLASH memory storing 
boot instructions, having tamper-resistant internal memory, and having a serial port, 

5 comprising the steps of: 

reading a key value from a security location in the FLASH memory; 
comparing the key value to a predetermined security value stored in the 
tamper-resistant internal memory; and 

selectively polling the serial port for activity based on the result of the 
10 comparison. 

2, A boot method according to claim 1 wherein the polling is performed if the 

key value does not match the predetermined security value. / 

, ' t 

I 

15 3. A boot method according to claim! 1 further comprising the step of jumping to 

• • j 

a boot location in FLASH memory to execute instructions stored therein. 

4. A boot method according' to claim 2 further comprising the step of 
downloading code into internal SRAM located in the mobile device in response to a 

20 detection of serial port activity, 

5. A boot method according to claim 4 further comprising the step of executing 
an instruction in the downloaded code. 

25 6. A boot method according to claim 5 further comprising die step of jumping to 
a boot location in FLASH memory to execute boot instructions stored therein. 

7. A boot method according to claim 1 wherein the predetermined security value 
is stored in a BootROM located in the mobile device. 

30 
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8. A boot method according Co claim 1 wherein the step of reading is performed 
in response to a reset command. 

9. An apparatus for use in a mobile device having a serial port, comprising: 

5 a first, tamper-resistant, memory means having a predetermined security value 

stored therein; J 

< 

a second memory means having a security location for storing a key value; 
and ' 

a processor in communication with the first and second memory means for 
10 comparing a key value stored in the security location to the predetermined security 
value, and for selectively polling die serial port for activity based on the result of the 
comparison. 

10. An apparatus according to claim 9 wherein the first, tamper-resistant, memory 
15 means comprises a Boot Read Only Memory (BootROM). 

' • /' . 

11. An apparatus according to claim 9 wherein the second memory means 
comprises a FLASH memory. J 

> 

i 

20 12. An apparatus according to claim 9 further comprising a reset means in 
communication with the processor for initiating a reset process. 

13. An apparatus according to claim 9 wherein the processor compares the key 
value and said predetermined security value in. response to initiation of a reset 

25 process. 

14. An apparatus according to claim 9 wherein the first, tamper-resistant, memory 
means is located on an ASIC 

30 15. An apparatus according to claim 9 wherein the processor is located on an 
ASIC. 
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16. An apparatus according to claim 9 wherein the processor comprises a 
microcontxol unit connected to the serial port. 



5 17. An apparatus according to claim 9 wherein the processor comprises a digital 
signal processor connected to the second memory means. 
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